Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/3137372e39312e3136362e302f32342d3234203d3e20323633343435.roa
File:                     3137372e39312e3136362e302f32342d3234203d3e20323633343435.roa (raw, json)
Hash identifier:          C6kwnZCycu8avheoWiBfbBkVyuohnJteOjuZpAxQa+g=
Subject key identifier:   22:37:B6:D5:61:BF:47:89:6B:48:3D:F0:9A:C9:39:EF:7C:69:1D:B4
Certificate issuer:       /CN=F1076108B5AD0183155EEC96C47E216B36ED588E
Certificate serial:       1DAEED9E3BA23842116D897D9A4216C4A6D5C086
Authority key identifier: F1:07:61:08:B5:AD:01:83:15:5E:EC:96:C4:7E:21:6B:36:ED:58:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1076108B5AD0183155EEC96C47E216B36ED588E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/3137372e39312e3136362e302f32342d3234203d3e20323633343435.roa
Signing time:             Thu 04 Jan 2024 14:41:58 +0000
ROA not before:           Thu 04 Jan 2024 14:36:58 +0000
ROA not after:            Thu 02 Jan 2025 14:41:58 +0000
asID:                     263445
IP address blocks:        177.91.166.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ae:ed:9e:3b:a2:38:42:11:6d:89:7d:9a:42:16:c4:a6:d5:c0:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1076108B5AD0183155EEC96C47E216B36ED588E
        Validity
            Not Before: Jan  4 14:36:58 2024 GMT
            Not After : Jan  2 14:41:58 2025 GMT
        Subject: CN=2237B6D561BF47896B483DF09AC939EF7C691DB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b7:bb:25:a3:bc:03:32:da:4b:94:da:5a:b5:
                    4e:d3:25:bf:18:13:47:1c:eb:23:2f:c7:b4:6e:b4:
                    93:d7:45:1a:b1:d8:a7:22:81:65:76:ed:32:74:4d:
                    c5:4c:ee:b5:71:3f:0b:5c:79:02:c2:4b:ad:cd:90:
                    32:e4:91:a4:65:c3:23:c7:5f:12:fe:b9:72:7d:10:
                    92:09:43:60:57:d6:6b:66:c2:63:5e:e3:53:04:33:
                    96:0a:74:7f:56:13:24:c6:de:08:b6:c5:55:3e:22:
                    7e:9e:7b:6d:95:17:b4:c7:7a:c6:cf:76:bd:18:78:
                    42:32:ef:51:2c:6b:71:6b:2a:b5:5f:08:23:70:e6:
                    0d:e4:03:1a:17:a0:a2:32:f7:df:8a:25:d2:d3:d4:
                    53:8e:59:e0:a4:57:2c:b1:b2:c1:6f:c0:ff:0c:e4:
                    59:e7:78:41:d1:c1:7d:39:98:4c:9f:99:d6:61:53:
                    a7:eb:3f:8e:94:65:14:e2:47:9a:55:0b:23:c0:ea:
                    a7:72:fe:df:29:81:df:ed:c4:e4:3e:7f:0e:c9:68:
                    4b:e3:45:1e:b0:e3:f8:8c:b1:1b:de:2b:3c:17:a7:
                    c6:77:a1:93:31:ee:07:54:f1:f7:1b:70:92:62:b8:
                    4b:c2:19:3e:45:8e:ea:c2:d7:f1:14:42:2c:e2:91:
                    5c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:37:B6:D5:61:BF:47:89:6B:48:3D:F0:9A:C9:39:EF:7C:69:1D:B4
            X509v3 Authority Key Identifier:
                keyid:F1:07:61:08:B5:AD:01:83:15:5E:EC:96:C4:7E:21:6B:36:ED:58:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/F1076108B5AD0183155EEC96C47E216B36ED588E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1076108B5AD0183155EEC96C47E216B36ED588E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/3137372e39312e3136362e302f32342d3234203d3e20323633343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:06:21:45:22:81:59:c1:66:bb:6c:dc:da:67:ef:de:73:1f:
         30:0a:a2:a7:4f:fd:14:61:ca:c8:35:ca:1a:17:b9:b2:5e:94:
         40:23:42:5b:27:5e:77:5d:0c:1b:f1:c9:77:b3:90:ec:93:b0:
         bf:d3:be:a4:cc:7c:37:3b:64:c8:3d:ac:9a:15:98:36:cc:fd:
         a1:36:fe:fb:bf:30:91:b2:a6:45:b3:12:87:54:47:33:5c:9d:
         fc:b7:7c:e9:09:da:73:a4:26:11:65:a0:93:3d:fe:22:51:80:
         4b:a0:0d:f5:fd:23:59:51:86:21:a1:a0:71:81:7d:8c:1d:ca:
         a1:0a:08:82:d8:43:8a:e0:97:9f:bb:74:70:f9:d7:25:58:57:
         55:75:af:72:a7:a9:62:74:0e:dc:47:43:11:6c:4a:16:46:7f:
         09:73:98:18:e3:f9:59:9a:4f:05:66:14:22:78:17:4b:cb:9c:
         3d:1e:5e:6a:d9:dc:2e:47:8f:8f:ed:b8:10:12:5f:ad:56:85:
         50:a2:4a:c0:c8:93:be:af:1d:2f:00:e7:41:01:a8:a7:59:ad:
         16:17:be:bf:07:9e:03:3b:6e:18:ab:1f:d9:41:d4:4e:3a:bc:
         d6:0d:79:24:df:0b:f5:b1:cc:c2:9e:b5:05:97:27:66:ca:8b:
         14:16:1b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:28 2025 by rpki-client